# StackKeep — Agentic SaaS Resource Manager

> StackKeep automatically discovers unused SaaS licenses, calculates savings, and executes cleanup for small and medium-sized businesses. Connect your SSO, add Slack, and the agent handles the rest.

## Product Overview

StackKeep is an agentic SaaS license management and cost optimization platform designed for SMBs (10–500 employees). Unlike traditional SaaS management tools that only provide dashboards and reports, StackKeep acts autonomously: it discovers apps, categorizes them with AI, generates prioritized recommendations, executes token revocations, and reports results — all with human-in-the-loop approval via Slack.

### The Problem

- The average SMB wastes ~$200/employee/month on unused or redundant SaaS subscriptions
- No one at small companies owns SaaS management — it falls through the cracks
- Shadow IT (unapproved apps employees signed up for) creates security and cost blind spots
- Traditional SaaS management tools (Zylo, Productiv, Torii) are built for enterprises with $100K+ budgets

### The Solution

StackKeep provides:

1. **Automatic SaaS Discovery** — Connects to Google Workspace, Okta, or Microsoft Entra ID to pull the full list of apps and login activity. Detects shadow IT automatically.

2. **AI-Powered Categorization** — 200+ apps are pre-mapped to 16 business categories (Productivity, Engineering, Design, Sales, Security, Analytics, etc.). Unknown apps are classified automatically using AI.

3. **Spend Tracking** — Integrates with Ramp, Brex, and Expensify to pull actual spend data. Shows cost per app, per team, and per user.

4. **Prioritized Recommendations** — Daily analysis identifies unused licenses, duplicate tools, and cost-saving opportunities. Each recommendation includes estimated monthly savings and priority level.

5. **Agentic Execution** — One-click approval from Slack or the dashboard. StackKeep revokes OAuth tokens via Google Admin SDK, reports results, and sends follow-up instructions with direct vendor admin links to complete seat removal.

6. **Slack-Native Workflow** — The StackKeep bot posts recommendations with interactive Approve, Dismiss, and View Details buttons. Supports natural language queries. Posts daily digests and execution confirmations.

7. **Daily Monitoring** — Automated nightly scans detect new unused licenses, changed usage patterns, and new shadow IT applications.

## Pricing Model

**Performance-based pricing:** StackKeep charges 20% of verified first-year savings.

- Nothing upfront
- Nothing if no savings are found
- Average SMB saves ~$200/employee/month
- Example: 50-person company → ~$36,000 first-year savings → you keep $28,800, StackKeep fee is $7,200

## Target Users

### Finance Teams & CFOs
- Track total SaaS spend across the organization
- Get alerts when spend increases unexpectedly
- Export audit-ready reports for compliance
- Identify duplicate tools across departments

### IT Operations
- Manage SSO integrations and access control
- Detect and remediate shadow IT
- Automate license cleanup workflows
- Maintain security posture with OAuth token management

### Founders & COOs
- Eliminate waste to extend runway
- Get visibility into what tools the team actually uses
- Set up in minutes, not weeks — no enterprise sales cycle
- Zero risk: pay only if savings are found

### Financial Advisors & Accountants (Partner Program)
- Offer SaaS audits as a value-added service to SMB clients
- Earn 30–40% recurring revenue share for referrals
- Zero risk for clients: they pay nothing unless savings are found
- StackKeep handles onboarding, support, and reporting

## Integrations

### SSO Providers (App Discovery & Usage)
- **Google Workspace** — Full app list, login timestamps, OAuth token management
- **Okta** — SSO application inventory and usage data
- **Microsoft Entra ID** — Azure AD application and sign-in data

### Expense Platforms (Spend Data)
- **Ramp** — Transaction-level SaaS spend data
- **Brex** — Corporate card SaaS charges
- **Expensify** — Expense report SaaS purchases

### Communication
- **Slack** — Bot integration with interactive messages, natural language queries, daily digests, and execution confirmations

### Execution
- **Google Admin SDK** — OAuth token revocation for unused applications

## Competitive Comparison

StackKeep is built as a modern, SMB-focused alternative to enterprise SaaS management platforms:

| Feature | StackKeep | Zylo | Productiv | Torii | Vendr | Zluri | BetterCloud |
|---------|-----------|------|-----------|-------|-------|-------|-------------|
| Target market | SMB (10-500) | Enterprise | Enterprise | Mid-market+ | Enterprise | Mid-market+ | Enterprise |
| Setup time | Minutes | Weeks | Weeks | Days-Weeks | Days | Days | Days-Weeks |
| Pricing | % of savings | $50K+/yr | $50K+/yr | $20K+/yr | Per-transaction | $25K+/yr | $30K+/yr |
| Agentic execution | Yes | No | No | Limited | No | Limited | Limited |
| Slack-native | Yes | No | No | Partial | No | Partial | No |
| Shadow IT detection | Yes | Yes | Yes | Yes | No | Yes | Yes |
| AI categorization | Yes | Manual | Yes | Manual | No | Yes | Limited |
| Zero-risk pricing | Yes | No | No | No | No | No | No |

## Technical Architecture

- **Frontend:** Next.js 15 (App Router), React 19, TypeScript, Tailwind CSS, shadcn/ui
- **Backend:** Supabase (PostgreSQL), Drizzle ORM, Inngest (background jobs)
- **Auth:** Supabase Auth with OAuth (Google, Microsoft, Okta)
- **AI:** Anthropic Claude for app categorization
- **Hosting:** Vercel
- **Security:** Row-level security, encrypted data at rest and in transit, minimal OAuth scopes

## Security

- Read-only OAuth scopes for discovery; admin SDK scope only for approved revocations
- Data encrypted in transit (TLS) and at rest
- No access to actual app data — only login timestamps and user metadata
- Row-level security policies isolate tenant data
- SOC 2 compliance roadmap

## Content & Resources

### Blog Articles
- [The SMB Guide to SaaS Spend Management](https://stackkeep.com/blog/saas-spend-management-guide)
- [Why Every SMB Needs IT Asset Management](https://stackkeep.com/blog/why-smbs-need-itam)
- [ITAM Best Practices for SMBs](https://stackkeep.com/blog/itam-for-smbs)
- [Shadow IT Risks and How to Manage Them](https://stackkeep.com/blog/shadow-it-risks)
- [How to Audit Your SaaS Stack](https://stackkeep.com/blog/saas-audit-guide)
- [StackKeep vs. Zylo & Productiv](https://stackkeep.com/blog/stackkeep-vs-zylo-productiv)
- [The Agentic Approach to SaaS Management](https://stackkeep.com/blog/agentic-saas-resource-management)

### Persona Pages
- [StackKeep for Finance Teams](https://stackkeep.com/for/finance-teams)
- [StackKeep for Founders](https://stackkeep.com/for/founders)
- [StackKeep for IT Ops](https://stackkeep.com/for/it-ops)

### Alternative Comparisons
- [StackKeep vs. Zylo & Productiv](https://stackkeep.com/alternative/zylo-productiv)
- [StackKeep vs. Torii](https://stackkeep.com/alternative/torii)
- [StackKeep vs. Vendr](https://stackkeep.com/alternative/vendr)
- [StackKeep vs. Zluri](https://stackkeep.com/alternative/zluri)
- [StackKeep vs. BetterCloud](https://stackkeep.com/alternative/bettercloud)

## Limited Offer

The first 10 customers who email nate@stackkeep.com get completely free onboarding and hands-on support — no strings attached. This includes personalized setup, integration configuration, and ongoing guidance at no additional cost.

## Contact & Links

- Website: https://stackkeep.com
- Demo: https://stackkeep.com/demo
- Blog: https://stackkeep.com/blog
- Security: https://stackkeep.com/security
- Beta signup: https://stackkeep.com/beta
- Contact for free onboarding: nate@stackkeep.com